This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft File: 28E2707085C2950AF9267465A3801841D8077215.mft (raw, json) Hash identifier: rm/7om5+p8gIbiV/V1O5imGko54Rp4m8Qwp7vM75wKU= Subject key identifier: AF:DA:4D:11:A4:6D:CB:5A:30:A2:DE:E1:43:94:8E:ED:1B:B5:9B:DE Authority key identifier: 28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 Certificate issuer: /CN=28E2707085C2950AF9267465A3801841D8077215 Certificate serial: 7C941125A937D6B5170069116A173F5C501EB277 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft Manifest number: 01FD Signing time: Thu 04 Dec 2025 23:41:12 +0000 Manifest this update: Thu 04 Dec 2025 23:36:12 +0000 Manifest next update: Mon 08 Dec 2025 06:03:12 +0000 Files and hashes: 1: 3130332e3138342e36362e302f32332d3234203d3e20313439363730.roa (hash: NmvwQ+vJpzvl8csZBAxbb4I15urZPoz8PAj6HkV5eq8=) 2: 28E2707085C2950AF9267465A3801841D8077215.crl (hash: rNYO0XhEko7YqlS+ghNwvqi1XNx2KUHXL7CcVSQ7K2M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 06:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:94:11:25:a9:37:d6:b5:17:00:69:11:6a:17:3f:5c:50:1e:b2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28E2707085C2950AF9267465A3801841D8077215 Validity Not Before: Dec 4 23:36:12 2025 GMT Not After : Dec 8 06:03:12 2025 GMT Subject: CN=AFDA4D11A46DCB5A30A2DEE143948EED1BB59BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:2f:fc:b3:5c:b2:5f:b6:57:85:05:61:59: 5e:d5:55:05:86:b2:8f:45:fc:7c:c4:6e:53:92:09: b7:39:13:bf:3f:5d:97:53:20:97:84:7b:8f:bd:36: 60:d6:59:9e:82:42:d9:a9:f2:13:8c:96:07:c6:55: 91:0d:ed:2c:ac:32:5b:ed:8f:01:87:32:30:e6:c0: ba:dd:f1:ae:da:0a:90:32:01:09:bb:81:c1:9a:1a: 68:85:de:58:3d:94:4d:77:2e:e7:a5:2f:31:2b:1b: 26:c3:36:5e:a3:12:c6:86:f2:4e:ee:72:06:67:35: 06:48:66:f0:1d:1e:17:22:10:97:d7:e1:a7:9c:38: 9d:6a:ed:21:bc:18:f8:08:2c:e9:f4:15:a4:d3:35: 3d:10:d7:9c:42:f8:12:50:d3:5f:4c:a8:73:ef:9d: ad:c7:ea:70:c7:34:c2:dc:07:7f:dd:b7:dc:a6:fd: b4:0b:7a:2d:d1:e9:88:eb:d2:b6:db:83:0b:89:71: c3:a3:c9:47:0f:75:95:6b:0e:d4:f2:7b:77:33:49: 67:39:85:45:c9:c7:9f:bb:a0:33:0f:c0:80:26:73: 8c:a1:b7:36:af:57:fe:e8:e6:d6:f4:10:9a:a7:1b: c0:a7:6c:1a:a9:89:38:b3:79:34:c2:68:46:49:42: aa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DA:4D:11:A4:6D:CB:5A:30:A2:DE:E1:43:94:8E:ED:1B:B5:9B:DE X509v3 Authority Key Identifier: keyid:28:E2:70:70:85:C2:95:0A:F9:26:74:65:A3:80:18:41:D8:07:72:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28E2707085C2950AF9267465A3801841D8077215.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44469ee9-814e-457a-bb13-a5c4b6f1b5af/0/28E2707085C2950AF9267465A3801841D8077215.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:39:c4:65:ac:fe:f3:bd:58:37:a3:ab:d9:4c:01:5f:ee:df: 04:af:13:17:c7:f3:7f:6d:b7:aa:98:b3:1f:37:87:89:22:6a: f3:eb:ad:f7:82:27:0e:28:57:bc:92:8d:30:04:cd:19:09:7e: bd:b2:b4:cf:88:e6:d8:d4:77:18:04:3d:55:d5:92:31:d3:0b: 1a:c5:57:83:52:1c:6a:6a:8a:c3:bb:17:33:cb:05:c1:eb:ac: 3f:53:65:63:12:3e:c5:98:98:c7:99:3d:02:e2:c3:94:00:ea: f5:08:4a:86:4e:c8:f4:72:e7:05:6b:c5:74:0d:b7:50:67:b8: a9:e8:a3:de:18:4c:65:3a:b3:a5:0e:5c:b9:85:2a:88:4a:a1: e7:61:4a:8f:a8:c3:75:a1:06:51:ae:44:b6:45:f3:f8:75:f2: 0a:a0:bb:fa:a3:88:46:a8:cc:b7:ad:98:98:29:b2:4a:1b:36: 1c:dc:a9:c6:80:4f:e8:98:ee:08:e3:97:41:2a:fd:33:2d:3e: 46:cf:ae:dc:e7:6e:a8:58:2d:db:50:f8:df:d9:4a:b4:4d:ea: 8e:14:a3:d5:ee:42:45:c3:6a:e4:91:59:d6:67:eb:58:61:82: 96:35:f2:df:1a:92:6e:40:3b:02:d4:c0:88:21:8f:8a:ab:5c: 59:de:ce:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJQRJak31rUXAGkRahc/XFAesncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFE ODA3NzIxNTAeFw0yNTEyMDQyMzM2MTJaFw0yNTEyMDgwNjAzMTJaMDMxMTAvBgNV BAMTKEFGREE0RDExQTQ2RENCNUEzMEEyREVFMTQzOTQ4RUVEMUJCNTlCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ey/8s1yyX7ZXhQVhWV7VVQWG so9F/HzEblOSCbc5E78/XZdTIJeEe4+9NmDWWZ6CQtmp8hOMlgfGVZEN7SysMlvt jwGHMjDmwLrd8a7aCpAyAQm7gcGaGmiF3lg9lE13LuelLzErGybDNl6jEsaG8k7u cgZnNQZIZvAdHhciEJfX4aecOJ1q7SG8GPgILOn0FaTTNT0Q15xC+BJQ019MqHPv na3H6nDHNMLcB3/dt9ym/bQLei3R6Yjr0rbbgwuJccOjyUcPdZVrDtTye3czSWc5 hUXJx5+7oDMPwIAmc4yhtzavV/7o5tb0EJqnG8CnbBqpiTizeTTCaEZJQqrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr9pNEaRty1owot7hQ5SO7Ru1m94wHwYDVR0j BBgwFoAUKOJwcIXClQr5JnRlo4AYQdgHchUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDQ2OWVlOS04MTRlLTQ1N2EtYmIxMy1hNWM0YjZmMWI1YWYvMC8yOEUyNzA3MDg1 QzI5NTBBRjkyNjc0NjVBMzgwMTg0MUQ4MDc3MjE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4NDFEODA3 NzIxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ0NjllZTktODE0ZS00NTdhLWJi MTMtYTVjNGI2ZjFiNWFmLzAvMjhFMjcwNzA4NUMyOTUwQUY5MjY3NDY1QTM4MDE4 NDFEODA3NzIxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJE5xGWs/vO9WDejq9lMAV/u3wSvExfH839t t6qYsx83h4kiavPrrfeCJw4oV7ySjTAEzRkJfr2ytM+I5tjUdxgEPVXVkjHTCxrF V4NSHGpqisO7FzPLBcHrrD9TZWMSPsWYmMeZPQLiw5QA6vUISoZOyPRy5wVrxXQN t1BnuKnoo94YTGU6s6UOXLmFKohKoedhSo+ow3WhBlGuRLZF8/h18gqgu/qjiEao zLetmJgpskobNhzcqcaAT+iY7gjjl0Eq/TMtPkbPrtznbqhYLdtQ+N/ZSrRN6o4U o9XuQkXDauSRWdZn61hhgpY18t8akm5AOwLUwIghj4qrXFnezqA= -----END CERTIFICATE-----Generated at Sun Dec 7 03:59:41 2025 by rpki-client